This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Autonomous System Provider Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/INwAC_jNS7HwUjq0ta-X62KVJno.asa
File:                     INwAC_jNS7HwUjq0ta-X62KVJno.asa (raw, json)
Hash identifier:          0iRDupFn1+ZlmDKitgIiV/zTNurv4zOW9wtdEQ3dQhc=
Subject key identifier:   20:DC:00:0B:F8:CD:4B:B1:F0:52:3A:B4:B5:AF:97:EB:62:95:26:7A
Certificate issuer:       /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial:       019B285B484DF2D14C1FD7BFC7FE5701AACC
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/INwAC_jNS7HwUjq0ta-X62KVJno.asa
Signing time:             Tue 16 Dec 2025 18:10:29 +0000
ASPA not before:          Tue 16 Dec 2025 18:10:29 +0000
ASPA not after:           Wed 01 Jul 2026 00:00:00 +0000
Customer ASID:            207061
Providers:                AS: 5405
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Feb 2026 19:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:28:5b:48:4d:f2:d1:4c:1f:d7:bf:c7:fe:57:01:aa:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
        Validity
            Not Before: Dec 16 18:10:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=20dc000bf8cd4bb1f0523ab4b5af97eb6295267a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:62:6e:60:97:5c:c9:40:a8:4a:b9:6f:cd:
                    c9:90:ae:09:70:37:67:f7:aa:bd:9f:2e:f4:ce:83:
                    cd:5e:b4:eb:66:8b:4a:e4:42:ac:f9:76:1f:6c:00:
                    49:c0:91:80:64:56:16:41:ea:26:d8:af:15:9b:44:
                    c3:b0:51:7c:d6:c2:21:a5:44:45:ad:76:51:e6:ba:
                    e1:ec:84:f8:27:8a:26:54:31:2b:12:6a:8d:3f:b7:
                    2c:23:71:94:0d:6f:8f:35:58:84:47:20:15:95:58:
                    f7:cd:ec:7c:c1:2b:93:ab:5f:84:1c:5d:b7:31:14:
                    1e:c7:e8:5e:89:80:fc:4a:ea:e6:45:c4:dc:e0:51:
                    ff:47:5e:23:ad:bb:2d:c8:81:72:8b:13:ac:ff:8d:
                    0c:16:20:da:9b:81:26:d4:0c:3e:37:4b:fe:d7:ff:
                    45:0e:5c:07:2f:e8:38:ec:74:e9:82:ab:06:12:d1:
                    c4:e0:ac:e4:e8:6a:3f:24:cc:37:d6:4e:71:6e:a7:
                    b3:03:6c:6a:c0:2f:c5:3e:54:34:9b:26:90:63:bf:
                    d6:36:30:c3:37:3b:ae:9b:97:88:92:5c:c9:42:fc:
                    8b:f6:a3:13:a6:6c:80:11:31:77:92:22:be:13:d7:
                    5d:a7:80:ed:c5:eb:fa:11:ae:d2:be:e2:dc:1d:68:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DC:00:0B:F8:CD:4B:B1:F0:52:3A:B4:B5:AF:97:EB:62:95:26:7A
            X509v3 Authority Key Identifier:
                keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/INwAC_jNS7HwUjq0ta-X62KVJno.asa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  207061

    Signature Algorithm: sha256WithRSAEncryption
         b3:58:5d:a5:a6:f1:33:c6:29:9d:05:81:f6:72:ab:c2:35:73:
         83:e0:f1:c1:37:d7:ff:04:c0:49:35:5a:d0:21:a3:e2:fa:f5:
         24:41:04:78:e6:35:c4:b6:b4:d5:dc:fa:ed:a1:61:05:ec:ee:
         e6:03:d5:61:2c:1c:2c:13:11:c0:92:f4:09:ff:b8:4e:f5:ac:
         db:2c:44:bc:05:85:72:31:c0:80:0a:d0:4d:4b:6b:2e:45:af:
         aa:27:42:ef:f2:63:23:1f:a0:50:f0:2a:44:f2:39:e5:ad:14:
         bc:99:88:0a:b3:09:c2:55:a0:64:50:18:fc:c7:ee:4c:1d:b9:
         20:ab:ea:38:f7:f2:ab:05:3b:cd:a9:a4:a8:a8:7c:aa:65:b6:
         e7:c4:13:2c:24:0f:33:c4:12:92:60:79:d5:e7:ae:7d:b8:1e:
         0f:a8:92:57:62:9d:42:fa:17:b2:4e:a1:f6:f0:dd:7a:48:39:
         5a:01:33:eb:00:1f:27:55:12:a2:e5:c3:52:67:06:c7:b5:4a:
         38:e6:3f:6f:6d:39:8e:34:b0:aa:55:6a:17:90:c4:b5:ee:ac:
         9d:a4:aa:f3:82:6d:62:38:f6:c1:15:ce:d0:d1:ff:86:92:50:
         0f:db:fc:f5:20:f6:5d:da:4f:47:62:ca:60:9f:ab:7c:e2:6c:
         02:d0:e7:21
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgISAZsoW0hN8tFMH9e/x/5XAarMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYzY0OWI2NmExOWRhMmZlYzIzNmIwNDlkZDEyMmEwZWYz
NjhiMGYwHhcNMjUxMjE2MTgxMDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGRjMDAwYmY4Y2Q0YmIxZjA1MjNhYjRiNWFmOTdlYjYyOTUyNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRZibmCXXMlAqEq5b83JkK4JcDdn
96q9ny70zoPNXrTrZotK5EKs+XYfbABJwJGAZFYWQeom2K8Vm0TDsFF81sIhpURF
rXZR5rrh7IT4J4omVDErEmqNP7csI3GUDW+PNViERyAVlVj3zex8wSuTq1+EHF23
MRQex+heiYD8SurmRcTc4FH/R14jrbstyIFyixOs/40MFiDam4Em1Aw+N0v+1/9F
DlwHL+g47HTpgqsGEtHE4Kzk6Go/JMw31k5xbqezA2xqwC/FPlQ0myaQY7/WNjDD
Nzuum5eIklzJQvyL9qMTpmyAETF3kiK+E9ddp4Dtxev6Ea7SvuLcHWivswIDAQAB
o4ICBDCCAgAwHQYDVR0OBBYEFCDcAAv4zUux8FI6tLWvl+tilSZ6MB8GA1UdIwQY
MBaAFODGSbZqGdov7CNrBJ3RIqDvNosPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMt
OGY1NDQ4NDdiZTc0LzEvSU53QUNfak5TN0h3VWpxMHRhLVg2MktWSm5vLmFzYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9jYjhmN2MtYzhiZi00MzQyLTgyNmMtOGY1NDQ4NDdiZTc0
LzEvNE1aSnRtb1oyaV9zSTJzRW5kRWlvTzgyaXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMo1TANBgkqhkiG
9w0BAQsFAAOCAQEAs1hdpabxM8YpnQWB9nKrwjVzg+DxwTfX/wTASTVa0CGj4vr1
JEEEeOY1xLa01dz67aFhBezu5gPVYSwcLBMRwJL0Cf+4TvWs2yxEvAWFcjHAgArQ
TUtrLkWvqidC7/JjIx+gUPAqRPI55a0UvJmICrMJwlWgZFAY/MfuTB25IKvqOPfy
qwU7zamkqKh8qmW258QTLCQPM8QSkmB51eeufbgeD6iSV2KdQvoXsk6h9vDdekg5
WgEz6wAfJ1USouXDUmcGx7VKOOY/b205jjSwqlVqF5DEte6snaSq84JtYjj2wRXO
0NH/hpJQD9v89SD2XdpPR2LKYJ+rfOJsAtDnIQ==
-----END CERTIFICATE-----
Generated at Mon Feb 2 04:42:53 2026 by rpki-client